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ABSTRACT 


The General Packet R adio Service (GPRS) is a new bearer service for GSM that greatly 
improves and simplifies wireless access to packet data networks, e.g., to the Internet. 

It applies a packet radio principle to transfer user data packets in an efficient way between 
mobile stations and external packet data networks. This tutorial gives an introduction to GPRS. 
The article discusses the system architecture and its basic functionality. It explains the offered 
services, the session and mobility management, the routing, the GPRS air interface including 
channel coding, and the GPRS protocol architecture. Finally, an interworking example between 
GPRS and IP networks is shown. 


he impressive growth of cellular mobile telephony as 

well as the number of Internet users promises an 

exciting potential for a market that combines both 

innovations: cellular wireless data services. Within the 
next few years, there will be an extensive demand for wireless 
data services. In particular, high-performance wireless | nter- 
net access will be requested by users. 

E xisting cellular data services do not fulfill the needs of 
users and providers. From the user’s point of view, data rates 
are too slow and the connection setup takes too long and is 
rather complicated. M oreover, the service is too expensive for 
most users. From the technical point of view, the drawback 
results from the fact that current wireless data services are 
based on circuit switched radio transmission. At the air inter- 
face, a complete traffic channel is allocated for a single user 
for the entire call period. In case of bursty traffic (e.g., I nter- 
net traffic), this results in a highly inefficient resource utiliza- 
tion. It is obvious that for bursty traffic, packet switched 
bearer services result in a much better utilization of the traffic 
channels. This is because a channel will only be allocated 
when needed and will be released immediately after the trans- 
mission of the packets. With this principle, multiple users can 
share one physical channel (statistical multiplexing). 

In order to address these inefficiencies, two cellular packet 
data technologies have been developed so far: cellular digital 
packet data (CDPD) (for AMPS, |S-95, and IS-136) and the 
General Packet R adio Service (GPRS). GPRS is the topic of 
this paper. It was originally developed for GSM, but will also 


be integrated within |S-136 (see [1]). We treat GPRS from 
the point of view of GSM. 

GPRS is a new bearer service for GSM that greatly 
improves and simplifies wireless access to packet data net- 
works, e.g., to the Internet. It applies a packet radio principle 
to transfer user data packets in an efficient way between GSM 
mobile stations and external packet data networks. Packets 
can be directly routed from the GPRS mobile stations to 
packet switched networks. N etworks based on the Internet 
Protocol (IP) (e.g., the global Internet or private/corporate 
intranets) and X .25 networks are supported in the current ver- 
sion of GPRS. 

Users of GPRS benefit from shorter access times and high- 
er data rates. In conventional GSM, the connection setup 
takes several seconds and rates for data transmission are 
restricted to 9.6 kbit/s. GPRS in practice offers session estab- 
lishment times below one second and ISD N-like data rates up 
to several ten kbit/s. 

In addition, GPRS packet transmission offers a more user- 
friendly billing than that offered by circuit switched services. In 
circuit switched services, billing is based on the duration of the 
connection. This is unsuitable for applications with bursty traffic. 
The user must pay for the entire airtime, even for idle periods 
when no packets are sent (e.g., when the user reads a Web 
page). In contrast to this, with packet switched services, billing 
can be based on the amount of transmitted data. The advantage 
for the user is that he or she can be “online” over along period 
of time but will be billed based on the transmitted data volume. 
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To sum up, GPRS improves the uti- 
lization of the radio resources, offers 
volume-based billing, higher transfer 
rates, shorter access times, and simpli- 
fies the access to packet data networks. 

GPRS has been standardized by 
ETSI (the European T elecommunica- 
tions Standards Institute) during the 
last five years. It finds great interest 
among many GSM network providers. 
At the moment field trials are being 
carried out, and it is expected that 
GPRS will be implemented in various 
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reader is familiar with the basic con- 


cepts of cellular networks. A brief 
overview of the GSM system can be 
found in [4]. In addition, there exists a 
variety of books on GSM, e.g,., 
[5][6][7]. The structure of the paper is as follows. First we 
describe the GPRS system architecture and discuss the funda- 
mental functionality. We then describe the offered services 
and the Quality of Service parameters. Afterward we show 
how a GPRS mobile station registers with the network, and 
how the network keeps track of its location. An example of 
how packets are routed in GPRS is given. Next, the physical 
layer at the air interface is explained, and we discuss the con- 
cept of multiple access, radio resource management, and the 
logical channels and their mapping onto physical channels. 
We then consider GPRS channel coding, and follow this with 
a discussion of the GPRS protocol architecture. Finally, we 
give an example of a GPRS-Internet interconnection. 


SYSTEM ARCHITECTURE 
GENERAL GSM CONCEPT 


In order to understand the GPRS system architecture, let 
us review the general GSM system concept and GSM address- 
ing [5]. 


GSM System Architecture —Fig. 1 shows the system archi- 
tecture of aGSM public land mobile network (PLMN) with 
essential components [5]. A GSM mobile station is denoted as 
MS.A cell is formed by the radio area coverage of a base 
transceiver station (BTS). Several BTSs together are con- 
trolled by one base station controller (BSC). The BTS and 
BSC together form the base station subsystem (BSS). The 
combined traffic of the mobile stations in their respective cells 
is routed through a switch, the mobile switching center 
(MSC). Connections originating from or terminating in the 
fixed network (e.g., |SDN) are handled by a dedicated gate- 
way mobile switching center (GMSC). GSM networks are 
structured hierarchically. They consist of at least one adminis- 
trative region, which is assigned to a MSC. Each administra- 
tive region is made up of at least one location area (LA). A 
location area consists of several cell groups. Each cell group is 
assigned to a BSC. 

Several data bases are available for call control and net- 
work management: the home location register (H LR ), the vis- 
ited location register (VLR), the authentication center 
(AUC), and the equipment identity register (EIR). 

For all users registered with a network operator, permanent 
data (such as the user’s profile) as well as temporary data 


i Ficure 1. GSM system architecture with essential components. 


(such as the user’s current location) are stored in the HLR.In 
case of a call to a user, the HLR is always first queried, to 
determine the user’s current location. A VLR is responsible 
for a group of location areas and stores the data of those users 
who are currently in its area of responsibility. This includes 
parts of the permanent user data that have been transmitted 
from the HLR to the VLR for faster access. But the VLR may 
also assign and store local data such as a temporary identifica- 
tion. The AUC generates and stores security-related data such 
as keys used for authentication and encryption, whereas the 
EIR registers equipment data rather than subscriber data. 


GSM Addresses and Identifiers —GSM distinguishes 
explicitly between user and equipment and deals with them 
separately. Besides phone numbers and subscriber and equip- 
ment identifiers, several other identifiers have been defined; 
they are needed for the management of subscriber mobility 
and for addressing of all the remaining network elements. 

The international mobile station equipment identity 
(IMEI) uniquely identifies a mobile station internationally. It 
isa kind of serial number. The IMEI is allocated by the 
equipment manufacturer and registered by the network opera- 
tor who stores it in the EIR. 

Each registered user is uniquely identified by its interna- 
tional mobile subscriber identity (IM SI). It is stored in the 
subscriber identity module (SIM ) (see Fig. 1). A mobile sta- 
tion can only be operated if a SIM with a valid IM SI is insert- 
ed into equipment with a valid IMEI. 

The “real telephone number” of a mobile station is the 
mobile subscriber |SDN number (MSISDN). It is assigned to 
the subscriber (his or her SIM, respectively), such that a 
mobile station set can have several M SISD Ns depending on 
the SIM. 

The VLR, which is responsible for the current location of 
a subscriber, can assign a temporary mobile subscriber identity 
(TMSI) which has only local significance in the area handled 
by the VLR. It is stored on the network side only in the VLR 
and is not passed to the HLR. 


GPRS SYSTEM ARCHITECTURE 


In order to integrate GPRS into the existing GSM archi- 
tecture, a new class of network nodes, called GPRS support 
nodes (GSN), has been introduced [8]. GSNs are responsible 
for the delivery and routing of data packets between the 
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packet data networks. It converts the 
GPRS packets coming from the SGSN 
into the appropriate packet data pro- 
tocol (PDP) format (e.g., IP or X .25) 
and sends them out on the corre- 
sponding packet data network. In the 


oe CSN PDR other direction, PDP addresses of 
#: incoming data packets are converted 
to the GSM address of the destination 

user. The readdressed packets are 

sent to the responsible SGSN. For 


this purpose, the GGSN stores the 
current SGSN address of the user and 
his or her profile in its location regis- 
ter. The GGSN also performs authen- 
tication and charging functions. 

In general, there is a many-to- 
many relationship between the 
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Wi FiGure 2. GPRS system architecture. 


mobile stations and the external packet data networks (PDN). 
Fig. 2 illustrates the system architecture. 

A serving GPRS support node (SGSN) is responsible for 
the delivery of data packets from and to the mobile stations 
within its service area. Its tasks include packet routing and 
transfer, mobility management (attach/detach and location 
management), logical link management, and authentication 
and charging functions. The location register of the SGSN 
stores location information (e.g., current cell, current VLR) 
and user profiles (e.g., |MSI, address(es) used in the packet 
data network) of all GPRS users registered with this SGSN. 

A gateway GPRS support node (GGSN) acts as an inter- 
face between the GPRS backbone network and the external 


SGSNs and the GGSNs: A GGSN is 

the interface to external packet data 

networks for several SGSNs; an 
SGSN may route its packets over different GGSNs to reach 
different packet data networks. 

Fig. 2 also shows the interfaces between the new network 
nodes and the GSM network as defined by ETSI in [8]. 

The Gb interface connects the BSC with the SGSN. Via 
the Gn and the Gp interfaces, user data and signaling data are 
transmitted between the GSNs. The Gn interface will be used 
if SGSN and GGSN are located in the same PLMN, whereas 
the Gp interface will be used if they are in different PLM Ns. 

All GSNs are connected via an |P-based GPRS backbone 
network. Within this backbone, the GSNs encapsulate the PDN 
packets and transmit (tunnel) them using the GPRS Tunneling 
Protocol GTP. There are two kinds of GPRS backbones: 
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W@ Ficure 3. GPRS system architecture and routing example. 
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¢ [ntra-PLMN backbone networks connect GSNs of the 
same PLMN and are therefore private |P-based networks 
of the GPRS network provider. 

¢ Inter-PLMN backbone networks connect GSN of differ- 
ent PLMNs. A roaming agreement between two GPRS 
network providers is necessary to install such a backbone. 

Fig. 3 shows two intra-PLMN backbone networks of differ- 
ent PLM Ns connected with an inter-PLMN backbone. The 
gateways between the PLM Ns and the external inter-PLM N 
backbone are called border gateways. Among other things, 
they perform security functions to protect the private intra- 
PLMN backbones against unauthorized users and attacks. The 
illustrated routing example will be explained later. 

The Gn and Gp interfaces are also defined between two 
SGSNs. This allows the SG SNs to exchange user profiles 
when a mobile station moves from one SGSN area to another. 

Across the Gf interface, the SGSN may query the IMEI of 
a mobile station trying to register with the network. 

The Gi interface connects the PLMN with external public 
or private PD Ns, such as the Internet or corporate intranets. 
Interfaces to IP (IP v4 and |Pv6) and X.25 networks are sup- 
ported. 

The HLR stores the user profile, the current SGSN address, 
and the PDP address(es) for each GPRS user in the PLMN. 
The Gr interface is used to exchange this information between 
HLR and SGSN. For example, the SGSN informs the HLR 
about the current location of the MS. When the MS registers 
with anew SGSN, the HLR will send the user profile to the 
new SG SN. The signaling path between GGSN and HLR (Gc 
interface) may be used by the GGSN to query a user’s location 
and profile in order to update its location register. 

In addition, the MSC/VLR may be extended with functions 
and register entries that allow efficient coordination between 
packet switched (GPRS) and circuit switched (conventional 
GSM ) services. Examples of this are combined GPRS and 
non-G PRS location updates and combined attachment proce- 
dures. M oreover, paging requests of circuit switched GSM 
calls can be performed via the SGSN. For this purpose, the 
Gs interface connects the data bases of SGSN and MSC/VLR. 

To exchange messages of the short message service (SM S) 
via GPRS, the Gd interface is defined. It interconnects the 
SMS gateway MSC (SMS-GMSC) with the SGSN. 


SERVICES 


BEARER SERVICES AND SUPPLEMENTARY SERVICES 


The bearer services of GPRS offer end-to-end packet 
switched data transfer. There are two different kinds: The 
point-to-point (PTP) service and the point-to-multipoint 
(PTM ) service. The latter will be available in future releases 
of GPRS. 

The PTP service [9] offers transfer of data packets between 
two users. It is offered in both connectionless mode (PTP con- 
nectionless network service (PTP-CLNS), e.g., for IP) and 
connection-oriented mode (PTP connection-oriented network 
service (PTP-CONS), e.g., for X.25). 

ThePTM service offers transfer of data packets from one user 
to multiple users. There exist two kinds of PTM services [10]: 
¢ Using the multicast service PTM -M, data packets are 

broadcast in a certain geographical area. A group identi- 

fier indicates whether the packets are intended for all 
users or for a group of users. 

¢ Using the group call service PT M-G, data packets are 
addressed to a group of users (PTM group) and are sent 
out in geographical areas where the group members are 
currently located. 


Probability for 


Corrupted 
packet 


Lost Duplicated | sequence 
Class packet 


10-9 
10-4 


@ Table 1. Reliability classes. 


1024 byte packet 


Mean 95% 
delay delay 
<7s 


128 byte packet 
Class Mean 95% 
delay delay 
<0.5s 


<1.5s 


@ Table 2. Delay classes. 


It is also possible to send SMS messages over GPRS. In 
addition, it is planned to implement supplementary services, 
such as call forwarding unconditional (CFU), call forwarding 
on mobile subscriber not reachable (CFNRc), and closed user 
group (CUG). 

Moreover, a GPRS service provider may offer additional 
non-standardized services, such as access to data bases, mes- 
saging services, and tele-action services (e.g., credit card vali- 
dations, lottery transactions, and electronic monitoring and 
surveillance systems) [9]. 


QUALITY OF SERVICE 


The Quality of Service QoS requirements of typical mobile 
packet data applications are very diverse (e.g., consider real- 
time multimedia, Web browsing, and e-mail transfer). Support 
of different QoS classes, which can be specified for each indi- 
vidual session, is therefore an important feature. GPRS allows 
defining QoS profiles using the parameters service prece- 
dence, reliability, delay, and throughput [9]. 

* The service precedence is the priority of a service in rela- 
tion to another service. There exist three levels of priori- 
ty: high, normal, and low. 

* The reliability indicates the transmission characteristics 
required by an application. Three reliability classes are 
defined, which guarantee certain maximum values for 
the probability of loss, duplication, mis-sequencing, 
and corruption (an undetected error) of packets (see 
Table 1). 

* The delay parameters define maximum values for the 
mean delay and the 95-percentile delay (see T able 2). 
The latter is the maximum delay guaranteed in 95 per- 
cent of all transfers. The delay is defined as the end-to- 
end transfer time between two communicating mobile 
stations or between a mobile station and the Gi interface 
to an external packet data network. This includes all 
delays within the GPRS network, e.g., the delay for 
request and assignment of radio resources and the transit 
delay in the GPRS backbone network. Transfer delays 
outside the GPRS network, e.g., in external transit net- 
works, are not taken into account. 
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* The throughput specifies the maximum/peak bit rate and 
the mean bit rate. 

U sing these Q oS classes, QoS profiles can be negotiated 
between the mobile user and the network for each session, 
depending on the QoS demand and the current available 
resources. The billing of the service is then based on the 
transmitted data volume, the type of service, and the chosen 
QoS profile. 


SIMULTANEOUS USAGE OF 
PACKET SWITCHED AND CIRCUIT SWITCHED SERVICES 


Ina GSM/GPRS network, conventional circuit switched 
services (Speech, data, and SMS) and GPRS services can be 
used in parallel. Three classes of mobile stations are defined 
[9]: 
¢ A classA mobile station supports simultaneous operation 

of GPRS and conventional GSM services. 

* A class B mobile station is able to register with the net- 
work for both GPRS and conventional GSM services 
simultaneously. [In contrast to an MS of class A, it can 
only use one of the two services at a given time. 

* A class C mobile station can attach for either GPRS or 
conventional GSM services. Simultaneous registration 
(and usage) is not possible. An exception are SMS mes- 
sages, which can be received and sent at any time. 


SESSION MANAGEMENT, 
M OBILITY MANAGEMENT, AND ROUTING 


In this section, we describe how a mobile station (MS) reg- 
isters with the GPRS network and becomes known to an 
external packet data network (PDN). We show how packets 
are routed to or from mobile stations, and how the network 
keeps track of the current location of the user. 


ATTACHMENT AND DETACHMENT PROCEDURE 


Before a mobile station can use GPRS services, it must reg- 
ister with an SGSN of the GPRS network. The network checks 
if the user is authorized, copies the user profile from the HLR 
to the SGSN, and assigns a packet temporary mobile sub- 
scriber identity (P-TM SI) to the user. This procedure is called 
GPRS attach. For mobile stations using both circuit switched 
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and packet switched services it is possible to perform com- 
bined GPR S/IM SI attach procedures. The disconnection from 
the GPRS network is called GPRS detach. It can be initiated 
by the mobile station or by the network (SGSN or HLR). 


SESSION MANAGEMENT, PDP CONTEXT 


To exchange data packets with external PDNs after a suc- 
cessful GPRS attach, a mobile station must apply for one or 
more addresses used in the PDN, e.g., for an IP address in 
case the PDN isan IP network. This address is called PDP 
address (Packet Data Protocol address). For each session, a 
so-called PDP context is created, which describes the charac- 
teristics of the session. It contains the PDP type (e.g., IP v4), 
the PDP address assigned to the mobile station (e.g., 
129.187.222.10), the requested QoS, and the address of a 
GGSN that serves as the access point to the PDN. This con- 
text is stored in the MS, the SGSN, and the GGSN. With an 
active PDP context, the mobile station is “visible” for the 
external PDN and is able to send and receive data packets. 
The mapping between the two addresses, PDP and !IMSI, 
enables the GGSN to transfer data packets between PDN and 
MS.A user may have several simultaneous PDP contexts 
active at a given time. 

The allocation of the PDP address can be static or dynam- 
ic. In the first case, the network operator of the user’s home- 
PLMN permanently assigns a PDP address to the user. In the 
second case, a PDP address is assigned to the user upon acti- 
vation of a PDP context. The PDP address can be assigned by 
the operator of the user’s home-PLMN (dynamic home- 
PLMN PDP address) or by the operator of the visited net- 
work (dynamic visited-PLMN PDP address). The home 
network operator decides which of the possible alternatives 
may be used. In case of dynamic PDP address assignment, the 
GGSN is responsible for the allocation and the activation/ 
deactivation of the PDP addresses. 

Fig. 4 shows the PDP context activation procedure. U sing 
the message “activate PDP context request,” the MS informs 
the SGSN about the requested PDP context. If dynamic PDP 
address assignment is requested, the parameter PDP address 
will be left empty. Afterward, usual security functions (e.g., 
authentication of the user) are performed. If access is granted, 
the SGSN will send a “create PDP context request” message 
to the affected GGSN. The latter creates a new entry in its 
PDP context table, which enables the GGSN to route data 
packets between the SGSN and the external 
PDN. Afterward, the GGSN returns a confir- 
mation message “create PDP context response” 
to the SGSN, which contains the PD P address 
in case dynamic PDP address allocation was 
requested. The SGSN updates its PDP context 
table and confirms the activation of the new 
PDP context to the MS (“activate PDP context 
accept”). 

GPRS also supports anonymous PDP con- 
text activation. In this case, security functions as 
shown in Fig. 4 are skipped, and thus, the user 
E (i.e., the IM SI) using the PDP context remains 
: unknown to the network. Anonymous context 
activation may be employed for pre-paid ser- 
vices, where the user does not want to be iden- 
tified. Only dynamic address allocation is 
possible in this case. 


GG5-K 


ROUTING 


W@ Figure 4. PDP context activation. 


Fig. 3 gives an example of how packets are 
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routed in GPRS. We assume that the packet data network 
isan 1P network. A GPRS mobile station located in PLMN1 
sends IP packets to a host connected to the IP network, e.g., 
to a Web server connected to the Internet. The SGSN that 
the mobile station is registered with encapsulates the | P 
packets coming from the mobile station, examines the PDP 
context, and routes them through the intra-PLMN GPRS 
backbone to the appropriate GGSN. The GGSN decapsu- 
lates the packets and sends them out on the IP network, 
where IP routing mechanisms are used to transfer the pack- 
ets to the access router of the destination network. The lat- 
ter delivers the IP packets to the host. 

Let us assume the home-PLMN of the mobile station is 
PLMN2. An IP address has been assigned to the mobile by 
the GGSN of PLMN2. Thus, the MS’s|P address has the 
same network prefix as the IP address of the GGSN in 
PLMN2. The correspondent host is now sending IP packets 
to the MS. The packets are sent out onto the IP network 
and are routed to the GGSN of PLMN2 (the home-G GSN 
of the MS). The latter queries the HLR and obtains the 
information that the MS is currently located in PLMN1. It 
encapsulates the incoming|!P packets and tunnels them 
through the inter-PLM N GPRS backbone to the appropriate 
SGSN in PLMN1. The SGSN decapsulates the packets and 
delivers them to the MS. 


LOCATION M ANAGEM ENT 


The main task of location management is to keep track of 
the user’s current location, so that incoming packets can be 
routed to his or her MS. For this purpose, the M S frequently 
sends location update messages to its current SGSN. If the 
MS sends updates rather seldom, its location (e.g., its current 
cell) is not known exactly and paging is necessary for each 
downlink packet, resulting in a significant delivery delay. On 
the other hand, if location updates happen very often, the 
MS’s location is well known to the network, and the data 
packets can be delivered without any additional paging delay. 
However, quite a lot of uplink radio capacity and battery 
power is consumed for mobility management in this case. 
Thus, a good location management strategy must be a com- 
promise between these two extreme methods. 

For this reason, a state model shown in Fig. 5 has been 
defined for location management in GPRS [11]. A MS can be in 
one of three states depending on its current traffic amount; the 
location update frequency is dependent on the state of the MS. 
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W@ Ficure 5. State model of a GPRS mobile station. 


In IDLE state the MS is not reachable. Performing a 
GPRS attach, the MS getsinto READY state. With aGPRS 
detach it may disconnect from the network and fall back to 
IDLE state. All PDP contexts will be deleted. The STANDBY 
state will be reached when an MS does not send any packets 
for a longer period of time, and therefore the READY timer 
(which was started at GPRS attach) expires. 

In IDLE state, no location updating is performed, i.e., the 
current location of the MS is unknown to the network. An MS 
in READY state informs its SGSN of every movement to a 
new cell. For the location management of an MS in STAND- 
BY state, a GSM location area (LA) is divided into several 
routing areas (RA). In general, an RA consists of several 
cells. The SGSN will only be informed when an MS moves to 
a new RA; cell changes will not be disclosed. To find out the 
current cell of anMS in STANDBY state, paging of the MS 
within a certain RA must be performed (see Fig. 9). For MSs 
in READY state, no paging is necessary. 

Whenever an MS moves to a new RA, it sends a “routing 
area update request” to its assigned SGSN (see Fig. 6). The 
message contains the routing area identity (RAI) of its old 
RA. The base station subsystem (BSS) adds the cell identifier 
(Cl) of the new cell, from which the SGSN can derive the new 
RAI. Two different scenarios are possible: 
¢ Intra-SGSN routing area update (Fig. 6): The MS has 

moved to an RA that is assigned to the same SGSN as the 

old RA. In this case, the SGSN has 
already stored the necessary user profile 
and can assign a new packet temporary 
mobile subscriber identity (P-TM SI) to 
the user (“routing area update accept”). 
Since the routing context does not change, 
there is no need to inform other network 
elements, such as GGSN or HLR. 
*|nter-SGSN routing area update: The 
new RA is administered by a different 
SGSN than the old RA. The new SGSN 
realizes that the MS has changed to its 
area and requests the old SGSN to send 
the PDP contexts of the user. A fter- 
ward, the new SGSN informs the 
involved GG SNs about the user’s new 
routing context. In addition, the HLR 
and (if needed) the MSC/VLR are 
informed about the user’s new SGSN. 
There also exist combined RA/LA 


ed 


@ Ficure 6. |ntr-SGSN routing area update. 


updates. These occur when an MS using 
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GPRS as well as conventional GSM moves to anewLA.The 
MS sends a “routing area update request” to the SGSN. The 
parameter “update type” is used to indicate that an LA 
update is needed. The message is then forwarded to the VLR, 
which performs the LA update. 

To sumup, GPRS mobility management consists of two 
levels: Micro mobility management tracks the current routing 
area or cell of the mobile station. It is performed by the 
SGSN. Macro mobility management keeps track of the mobile 
station's current SGSN and stores it inthe HLR, VLR, and 
GGSN. 


AIR INTERFACE — PHYSICAL LAYER 


MULTIPLE ACCESS AND 
RADIO RESOURCE M ANAGEMENT PRINCIPLES 


On the physical layer, GSM uses a combination of FDMA 
and TDMA for multiple access. As shown in Fig. 7, two fre- 
quency bands 45 MHz apart have been reserved for GSM 
operation: 890 - 915 MHz for transmission from the mobile 
station, i.e., uplink, and 935 - 960 MHz for transmission from 
the BTS, i.e., downlink. Each of these bands of 25 MHz width 
is divided into 124 single carrier channels of 200 kH z width. A 
certain number of these frequency channels, the so-called cell 
allocation, is allocated to a BTS, i.e., to a cell [5]. 

Each of the 200 kHz frequency channels carries eight 
TDMA channels by dividing each of them into eight time 
slots. The eight time slots in these TDMA channels form a 
TDMA frame. Each time slot of aTDMA frame lasts for a 
duration of 156.25 bit times and, if used, contains a data 
burst. The time slot lasts 15/26 ms = 576.9 us; so a frame 


takes 4.613 ms. The recurrence of one particular time slot 
defines a physical channel. A GSM mobile station uses the 
same time slots in the uplink as in the downlink [5]. 

The channel allocation in GPRS is different from the origi- 
nal GSM. GPRS allows a single mobile station to transmit on 
multiple time slots of the same TDMA frame (multislot oper- 
ation). This results in a very flexible channel allocation: one to 
eight time slots per TDMA frame can be allocated for one 
mobile station. M oreover, uplink and downlink are allocated 
separately, which efficiently supports asymmetric data traffic 
(e.g., Web browsing). 

In conventional GSM, a channel is permanently allocated 
for a particular user during the entire call period (whether 
data is transmitted or not). In contrast to this,in GPRS the 
channels are only allocated when data packets are sent or 
received, and they are released after the transmission. For 
bursty traffic this results in a much more efficient usage of the 
scarce radio resources. With this principle, multiple users can 
share one physical channel. 

A cell supporting GPRS may allocate physical channels for 
GPRS traffic. Such a physical channel is denoted as packet 
data channel (PDCH). The PDCH sare taken from the com- 
mon pool of all channels available in the cell. Thus, the radio 
resources of a cell are shared by all GPRS and non-GPRS 
mobile stations located in this cell. The mapping of physical 
channels to either packet switched (GPRS) or circuit switched 
(conventional GSM ) services can be performed dynamically 
(capacity on demand principle [12]), depending on the current 
traffic load, the priority of the service, and the multislot class. 
A load supervision procedure monitors the load of the PDCHs 
in the cell. According to the current demand, the number of 
channels allocated for GPRS (i.e., the number of PDCHs) can 
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be changed. Physical channels not currently in use by conven- 
tional GSM can be allocated as PD CH to increase the quality 
of service for GPRS. When there is a resource demand for 
services with higher priority, PD CHs can be de-allocated. 


LOGICAL CHANNELS IN GPRS 


On top of the physical channels, a series of logical chan- 
nels are defined to perform a multiplicity of functions, e.g., 
signaling, broadcast of general system information, synchro- 
nization, channel assignment, paging, or payload transport. 

Table 3 lists the packet data logical channels defined in 
GPRS [12]. As with conventional GSM, they can be divided 
into two categories: traffic channels and signaling (control) 
channels. 

The packet data traffic channel (PD TCH) is employed for 
the transfer of user data. It is assigned to one mobile station 
(or in the case of PTM to multiple mobile stations). One 
mobile station can use several PD TCHs simultaneously. 

The packet broadcast control channel (PBCCH) is a unidi- 
rectional point-to-multipoint signaling channel from the base 
station subsystem (BSS) to the mobile stations. It is used by 
the BSS to broadcast specific information about the organiza- 
tion of the GPRS radio network to all GPRS mobile stations 
of acell. Besides system information about GPRS, the 
PBCCH should also broadcast important system information 
about circuit switched services, so thata GSM/GPRS mobile 
station does not need to listen to the broadcast control chan- 
nel (BCCH). 

The packet common control channel (PCCCH) is a bidi- 
rectional point-to-multipoint signaling channel that transports 
signaling information for network access management, e.g., 
for allocation of radio resources and paging. It consists of four 
sub-channels: 

* The packet random access channel (PRACH) is used by 
the mobile to request one or more PDTCH. 

* The packet access grant channel (PAGCH) is used to 
allocate one or more PDTCH to a mobile station. 

* The packet paging channel (PPCH) is used by the BSS to 
find out the location of a mobile station (paging) prior to 
downlink packet transmission. 

* The packet notification channel (PNCH) is used to 
inform a mobile station of incoming PTM messages 
(multicast or group call). 
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@ Ficure 8. Uplink channel allocation (mobile originated packet 
transfer); one or two steps. 


Channel | Function 


Packet data Data traffic MS BSS 
traffic channel 
Packet broadcast Broadcast MS< BSS 
control channel control 
Packet common Random access | MS— BSS 
control channel Access grant MS< BSS 
(PCCCH) Paging MS< BSS 
Notification MS< BSS 
Packet dedicated Associated MS BSS 
control channels control 
Timing advance | MS<> BSS 
control 


@ Table 3. Logical channelsin GPRS. 


The dedicated control channel is a bidirectional point-to- 
point signaling channel. It contains the channels PACCH and 
PTCCH: 

* The packet associated control channel (PACCH) is 
always allocated in combination with one or more 
PDTCH that are assigned to one mobile station. It 
transports signaling information related to one specific 
mobile station (e.g., power control information). 

* The packet timing advance control channel (PTCCH) is 
used for adaptive frame synchronization. 

The coordination between circuit switched and packet 
switched logical channels is important. If the PCCCH is not 
available in a cell, a mobile station can use the common con- 
trol channel (CCCH) of conventional GSM to initiate the 
packet transfer. M oreover, if the PBCCH is not available, it 
will listen to the broadcast control channel (BCCH) to get 
informed about the radio network. 

Fig. 8 shows the principle of the uplink channel allocation 
(mobile originated packet transfer) [12]. A mobile station 
requests radio resources for uplink transfer by sending a 
“packet channel request” on the PRACH or RACH. The net- 
work answers on the PAGCH or AGCH, respectively. It tells 
the mobile station which PDCHs it may use. A so-called 
uplink state flag (U SF) is transmitted in the downlink to tell 
the mobile station whether or not the uplink channel is free. 
Fig. 9 illustrates the paging procedure of a mobile station 
(mobile terminated packet transfer) [12]. 
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W@ Figure 10. Multiframe structure with 52 frames. 


Infobits 
without 
USF 


g(D) =1+D+D3+D4, 


where D denotes the delay operator [15]. 

A possible encoder realization is shown in Fig. 
12. At the output of the convolutional encoder a 
codeword v(D) = (v!(D), v()(D)) of length 588 
bits results. The output sequences of bits are 
defined by v'2)(D) = u(D) g/)(D) and v'2)(D) = 


u(D) g(2)(D). After the encoding, 132 bits are 


punctured, resulting in a codeword of length 456 
bits. Thus, we obtain a code rate of the convolu- 


@ Table 4. Channel coding schemes for the logical traffic channels in 


MAPPING OF PACKET DATA LOGICAL CHANNELS 
ONTO PHYSICAL CHANNELS 


The mapping of logical channels onto physical channels 
has two components: mapping in frequency and mapping in 
time. The mapping in frequency is based on the TDMA frame 
number and the frequencies allocated to the BTS and the 
mobile station. The mapping in time is based on the definition 
of complex multiframe structures on top of the TDMA 
frames. A multiframe structure for PDCHs consisting of 52 
TDMA frames is shown in Fig. 10 [13]. Four consecutive 
TDMA frames form one block (12 blocks, BO- 11), two 
TDMA frames are reserved for transmission of the PTCCH, 
and the remaining two frames are idle frames. 

The mapping of the logical channels onto the blocks BO - 
B11 of the multiframe can vary from block to block and is 
controlled by parameters that are broadcast on the PBCCH. 
In [13], it is defined which time slots may be used by a logical 
channel. 

Besides the 52-multiframe, which can be used by all logical 
GPRS channels, a 51-multiframe structure is defined. It is 
used for PDCHs carrying only the logical channels PCCCH 
and PBCCH and no other logical channels. 


CHANNEL CODING 


Channel coding is used to protect the transmitted data 
packets against errors. The channel coding technique in 
GPRS is quite similar to the one employed in conventional 
GSM. An outer block coding, an inner convolutional coding, 
and an interleaving scheme is used. 

Four different coding schemes are defined [14]. Their 
parameters are listed in Table 4. Let us use coding scheme 
CS-2 to discuss the encoding process illustrated in Fig. 11. 

First of all, 271 information bits (including the 3-bit uplink 
state flag (USF)) are mapped to 287 bits using a systematic 
block encoder, i.e., 16 parity bits are added. The U SF pre- 
encoding maps the first three bits of the information block 
(i.e., the USF) to six bits in a systematic way. Afterward, four 
zero bits (tail bits) are added at the end of the entire block. 
The tail bits are needed for termination of the subsequent 
convolutional coding. For the convolutional coding, a non-sys- 
tematic rate-1/2 encoder with constraint length 4 is used. It is 
defined by the generator polynomials 


g(D)=1+D34+ D4 


tional encoder (including the puncturing) of 
R= 271+16+3+4 2 
7 456 “3 


Let us now consider CS-1.1 For the block coding a system- 
atic fire code is used. There is no pre-coding of the USF bits. 
The convolutional coding is done with the known rate-1/2 
encoder, however, no puncturing is applied. Using CS-4, the 
three U SF bits are mapped to 12 bits. No convolutional cod- 
ing is applied. 

For the coding of the traffic channel (PD TCH), one of the 
four coding schemes is chosen, depending on the quality of 
the channel. U nder very bad channel conditions, we may use 
CS-1 and obtain a data rate of 9.05 kbit/s per GSM time slot, 
but a very reliable coding. Under good channel conditions, we 
transmit without convolutional coding and achieve a data rate 
of 21.4 kbit/s per time slot. With eight time slots, we obtain a 
maximum data rate of 171.2 kbit/s. In practice, multiple users 
share the time slots, and thus, a much lower bit rate is avail- 
able to the individual user. F or example, approximately 40 
kbit/s per user will be achieved, if three users share the time 
slots and CS-3 is employed. CS-1 is used for the coding of the 
signaling channels.2 

After encoding, the codewords are input into a block inter- 
leaver of depth 4. On the receiver side, the codewords are de- 
interleaved. The decoding is performed using the well know 
Viterbi Algorithm (see, e.g., [15]). 


GPRS. 


PROTOCOL ARCHITECTURE 


TRANSMISSION PLANE 


Fig. 13 illustrates the protocol architecture of the GPRS 
transmission plane [11], providing transmission of user data 
and its associated signaling, e.g., for flow control, error detec- 
tion, and error correction. 


GPRS Backbone: SGSN - GGSN —As mentioned earlier, 
user data packets are encapsulated within the GPRS back- 
bone network. The GPRS Tunneling Protocol (GTP) [16] tun- 
nels the user data packets and related signaling information 
between the GPRS support nodes (GSNs). The protocol is 
defined both between GSNs within one PLMN (Gn interface) 
and between GSNs of different PLM Ns (Gp interface). In the 
transmission plane, GTP employs a tunnel mechanism to 


1CS-1 is equivalent to the coding of the GSM SACCH (see[5]). 


2 For the PRACH a different coding is used. 
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transfer user data packets. In the sig- 
naling plane, GTP specifies a tunnel 


Precoding 
of USF 


Adel Conmodut secs 


control and management protocol. 
The signaling is used to create, modi- 
fy, and delete tunnels. 

GTP packets carry the user’s IP or 
X.25 packets. Below GTP, the standard protocols TCP or 
UDP are employed to transport the GTP packets within the 
backbone network. X .25 expects a reliable data link, thus 
TCP is used. UDP is used for access to |P-based packet data 
networks, which do not expect reliability in the network layer 
or below. IP is employed in the network layer to route pack- 
ets through the backbone. Ethernet, ISDN, or ATM -based 
protocols may be used below IP. 

To summarize, in the GPRS backbone we have an I P/X .25- 
over-GT P-over-U DP/T CP-over-IP transport architecture. 


Subnetwork Dependent Convergence Protocol —The Sub- 
network Dependent Convergence Protocol (SNDCP) [17] is 
used to transfer data packets between SGSN and MS. Its 
functionality includes: 

* Multiplexing of several connections of the network layer 
onto one virtual logical connection of the underlying 
LLC layer. 

* Compression and decompression of user data and redun- 
dant header information. 

Air Interface —In the following, we consider the data link 
layer and the physical layer at the air interface Um. 

D ata Link Layer: The data link layer between the MS and the 
network is divided into two sublayers: the LLC layer (between 
MS-SGSN) and the RLC/M AC layer (between M S-BSS). 
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W@ Figure 11. Encoding of GPRS data packets. 


tear 


ATs aa 


SKOCE. Subnetworkdcpencdent oo mrergence proiocal 
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The logical link control (LLC) layer [18] provides a highly 
reliable logical link between an MS and its assigned SGSN. Its 
functionality is based on the well known HDLC protocol and 
includes sequence control, in-order delivery, flow control, 
detection of transmission errors, and retransmission (automat- 
ic repeat request (ARQ)). The data confidentiality is ensured 
by ciphering functions. Variable frame lengths are possible. 
Both acknowledged and unacknowledged data transmission 
modes are supported. The protocol is mainly an adapted ver- 
sion of the LAPD m protocol used in GSM (see [5]). 

The RLC/MAC layer [19] at the air interface includes two 
functions. The main purpose of the radio link control (RLC) 
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Wi Figure 14. Signaling plane: MS-SGSN. 


layer is to establish a reliable link between the MS and the 
BSS. This includes the segmentation and reassembly of LLC 
frames into RLC data blocks and ARQ of uncorrectable 
codewords. The medium access control (MAC) layer controls 
the access attempts of an MS on the radio channel shared by 
several MSs. It employs algorithms for contention resolution, 
multiuser multiplexing on a PD TCH, and scheduling and pri- 
oritizing based on the negotiated QoS. The GPRS MAC pro- 
tocol is based on the principle of slotted Aloha [20]. In the 
RLC/MAC layer, both the acknowledged and unacknowl- 
edged modes of operation are supported. 

Physical Layer: The physical layer between MS and BSS is 
divided into the two sublayers: the physical link layer (PLL) 
and the physical RF Layer (RFL). 

The PLL provides a physical channel between the MS and 
the BSS. Its tasks include channel coding (detection of trans- 
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mission errors, forward error correction (FEC), indication 
of uncorrectable codewords), interleaving, and detection 
of physical link congestion. 

The RFL operates below the PLL. Among other 
things, it includes modulation and demodulation. 


BSS - SGSN Interface —The BSS GPRS Application 
Protocol (BSSGP) delivers routing and QoS-related infor- 
mation between BSS and SGSN. The underlying Network 
Service (NS) protocol is based on the Frame R elay proto- 
col. 


SIGNALING PLANE 


The protocol architecture of the signaling plane [11] 
comprises protocols for control and support of the func- 
tions of the transmission plane, e.g., GPRS attach and 
detach, PDP context activation, control of routing paths, 


and allocation of network resources. 
Between MS and SGSN (Fig. 14), the GPRS M obility 
M anagement and Session M anagement (GMM /SM) pro- 
tocol supports mobility and session management when 
performing functions such as GPRS attach/detach, security 
functions, PDP context activation, and routing area updates. 
The signaling architecture between SG SN and the regis- 
ters HLR, VLR, and EIR (Fig. 15, Fig. 16) uses the same 
protocols as conventional GSM [5] and extends them with 
GPR S-specific functionality. Between SGSN and HLR as 
well as between SGSN and EIR, an enhanced M obile A ppli- 
cation Part (MAP) is employed. The MAP isa mobile net- 
work-specific extension of the Signaling System SS#7. It 
transports the signaling information related to location 
updates, routing information, user profiles, and handovers. 
The exchange of MAP messages is accomplished over the 
transaction capabilities application part (TCAP) and the sig- 
naling connection control part (SCCP). The base station sys- 
tem application part (BSSAP+) includes functions of GSM's 
BSSAP. It is applied to transfer signaling information 
between the SGSN and the VLR (Gs interface). This includes 
signaling of the mobility management when coordination of 
GPRS and conventional GSM functions is necessary (e.g., 
combined GPRS and non-GPRS location update, combined 
GPRS/IM SI attach, or paging of an MS viaGPRS for an 
incoming GSM call). 
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Wi Ficure 15. Signaling plane: SGSN-HLR, SGSN-EIR. 


@ Ficure 16. Signaling plane: SGSN- MSC/VLR. 
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INTERWORKING WITH IP NETWORKS 


Finally, we show how a GPRS network can be intercon- 
nected with an |P-based packet data network, such as the 
Internet or intranets. GPRS supports both IPv4 and IPv6. As 
shown in Fig. 3, the Gi interface is the interworking point with 
IP networks. From outside, i.e, from an external IP network’s 
point of view, the GPRS network looks like any other IP sub- 
network, and the GGSN looks like a usual IP router. Fig. 17 
shows the protocol stacks at the GGSN [21]. 

Fig. 18 gives an example of how a GPRS network may be 
connected to the Internet. Each registered user who wants to 
exchange data packets with the IP network gets an IP address, as 
explained earlier. The IP address is taken from the address space 
of the GPRS operator. In order to support a large number of 
mobile users, it is essential to use dynamic IP address allocation 
(in IP v4). Thus, a DHCP server (D ynamic H ost Configuration 
Protocol [22]) is installed. The address resolution between IP 
address and GSM address is performed by the GGSN, using the 
appropriate PDP context. The routing of IP packets and the tun- 
neling through the intra-PLMN backbone (using the GPRS T un- 
neling Protocol GTP) has been explained in prior sections. 

M oreover, a domain name server (DNS) [23] managed by 
the GPRS operator or the external |P network operator can 
be used to map between external |P addresses and host 
names. To protect the PLMN from unauthorized access, a 
firewall is installed between the private GPRS network and 
the external |P network. 

With this configuration, GPRS can be seen as a wireless 
extension of the Internet all the way to a mobile station or 
mobile computer. The mobile user has direct connection to 
the Internet. 


SUMMARY 


The General Packet R adio Service GPRS is an important 
step in the evolution toward third-generation mobile net- 
works. Its packet switched transmission technology is opti- 
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W@ Ficure 17. Protocols at the Gi |P interface. 


mized for bursty traffic such as Internet/intranet services. One 
of the main benefits for users is that they can always be online 
and may be charged for service based on the amount of trans- 
mitted data. 

In this paper, we presented an overview of the complex 
GPRS system. 

We discussed the GPRS system architecture with its two 
new network nodes, namely, the SGSN and GGSN. We 
explained their functionality and interworking with existing net- 
work nodes and data bases (HLR,VLR,EIR). The GSM data 
bases must be extended with entries for GPR S-specific data. 

In its current version, GPRS offers point-to-point bearer 
services and transport of SMS messages; in future releases 
point-to-multipoint services will also be offered. An important 
feature of GPRS is its QoS support. It allows specifying QoS 
profiles with parameters: service precedence, reliability, delay, 
and throughput. An individual QoS profile can be negotiated 
for each PDP context. For the simultaneous usage of conven- 
tional GSM and packet switched GPRS services, three classes 
of mobile stations are defined. 

Before a GPRS mobile station can use GPRS services it 
must obtain an address used in the packet data network (a 
PDP address) and create a PDP context. The context describes 
the characteristics of the connection to the packet data net- 
work (PDP type, PDP address, QoS, and GGSN). With an 
active PDP context, packets from the external packet 
data network will be routed to the GGSN, which 
then tunnels them to the current SGSN of the 
mobile user. The GPRS location management is 
based on the definition of a MS state model. 
Depending on the state of the MS, it performs many 
or only few location updates. F or this purpose, spe- 
cial routing areas are defined, which are sub-areas of 
the location areas defined in GSM. Although GPRS 
has its own mobility management, it cooperates with 
the GSM mobility management. This results in a 
more efficient paging mechanism for mobile stations 
that use GSM and GPRS simultaneously. D ynamic 
PDP address allocation (e.g., using DHCP) is anoth- 
er important feature, which enables the GPRS 
provider to support a large number of subscribers. 

We also discussed the GPRS air interface. An 
important concept in GPRS is its multislot capabili- 
ty: from one to eight time slots per TDMA frame 
can be allocated for a single user. U plink and down- 
link are allocated separately. M oreover, the physical 
channels are only allocated when data packets are 
sent or received, and they will be released after the 
transmission of the packets. T hese features result in 
an efficient usage of the radio resources. The avail- 
able radio resources in a cell are shared dynamically 
between circuit switched (GSM ) and packet switched 


W Figure 18. E xample of a GPRS-I|nternet connection. 
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principle. On top of the physical channels, a number of new 
logical packet channels have been standardized for GPRS. 
The traffic channel PD TCH is used for payload transmission. 
One broadcast control channel (PBCCH), four common con- 
trol channels (PRACH, PAGCH, PPCH, and PNCH), and 
two dedicated control channels (PACCH and PTCCH) trans- 
fer signaling information, e.g., for access control and broad- 
cast of system information. Once again, the coordination 
between GPRS channels and GSM channels saves radio 
resources. 

GPRS channel coding defines four different coding 
schemes. Depending on the current radio channel quality, one 
of them can be chosen to achieve either a high bit rate or 
strong error protection. 

We also showed the protocol architecture of the transmis- 
sion and signaling plane. GPR S-specific protocols include the 
GPRS Tunneling Protocol, the GPRS Mobility M anagement 
and Session M anagement protocol, and the BSS GPRS Appli- 
cation Protocol. Some GSM protocols, such as the M obile 
Application Part, have been extended. 

Finally, a simple GPRS-IP interworking scenario conclud- 
ed this tutorial. 
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